LLYLI Privacy Policy
Last updated: 15 November 2026
Who we are
LLYLI ("Learn the Language You Live in") helps you learn the language of the country you live in: English speakers learn European Portuguese, and Portuguese speakers learn English (UK). LLYLI is made by Koos Simons, a sole trader in Lisbon, Portugal, who is responsible for your data (the data controller). This policy explains what data the app collects, why, who receives it, and what you can control.
- Email: hello@llyli.eu
- WhatsApp: Chat with us
What we collect and why
- Account. You sign in with Apple. We store your account ID and the email address Apple gives us (this can be Apple's private relay address). Purpose: sign-in and sync.
- Your learning content. Words and sentences you capture, their translations, grammar notes, example sentences, an optional place note you type ("where did you hear this?"), personal notes, your language choices, and your review history and progress (scheduling data, daily progress, review sessions). Purpose: run the app and sync it across your devices.
- Purchases. If you subscribe, our server checks the signed Apple transaction and stores the product, expiry date and Apple's original transaction ID against your account. Purpose: unlock LLYLI Pro. We never see your payment details; Apple handles payment.
- Usage events and errors. The app sends short events to our own database, linked to your account ID: for example word captured, review session completed, word mastered, paywall viewed, onboarding completed, and error codes. Properties are short labels or counts (for example a source, a count, a product ID or a word ID). The app drops any property longer than 40 characters, so word and sentence text is not included. Purpose: fix bugs and see which features are used. We do not use advertising or third-party analytics SDKs, and we do not track you across other companies' apps or websites.
- Sentence reports. If you flag a sentence as wrong, we store the sentence text, your reason, the language, the app version and basic device information.
What is sent to AI (OpenAI)
LLYLI uses OpenAI to translate and correct words and sentences and to create example sentences and quiz options. The app sends the content to our server, and our server sends it on to OpenAI. OpenAI receives:
- the word or sentence you capture (typed, pasted, scanned from text, or spoken and turned into text on your phone first);
- the optional place note, if you typed one;
- your language pair and, where set, your learning goal;
- words from your notebook, when the app generates practice sentences or quiz options;
- a photo, when you use photo capture to identify objects. The photo is taken with the camera, resized, and sent as a JPEG. Our server code does not save it.
We do not send your email address or account ID to OpenAI. Your account is used by our server to check that you are signed in and to apply the free-word limit.
Permission
The app asks for your explicit permission before AI features send your content. You can withdraw it at any time in Settings. Without it you can still review the words already in your notebook and practise with on-device content. Features that need AI (capturing new words and sentences, photo capture, generated sentences and quiz options) will not send anything until you allow it again.
Device permissions
- Camera: to photograph objects for word capture and to scan text in the language you are learning. Text scanning (Live Text) runs on your phone.
- Microphone and speech recognition: to turn a sentence you say into text. The app asks Apple's speech recognition to work on your device when your iPhone supports it. If it does not, Apple may process the audio on its servers under Apple's terms. We do not receive or store your audio. Only the resulting text is used, and it is treated like any other sentence you capture.
- Spoken playback of the words you are learning uses your phone's built-in voice.
You can change these permissions at any time in iOS Settings.
Analytics and diagnostics
Usage events and error codes are described above and are stored in our Supabase database. The app also subscribes to Apple's MetricKit crash reports, but it only writes a summary to your device's log. It does not upload them.
Where data is stored and who processes it
| Service | Role | Data |
|---|---|---|
| Supabase | Hosts our database, sign-in and server functions | Everything under "What we collect". Privacy policy |
| OpenAI | Processes AI requests | The AI content listed above. Privacy policy |
| Apple | Sign in with Apple, speech recognition (where not on-device), App Store purchases, TestFlight | Privacy policy |
On your device, the app keeps a local copy of your notebook so it works offline. It is removed when you delete the app. Data travels over HTTPS. Access to your rows in our database is limited to your own account by row-level security.
Retention and deletion
We keep your data while your account exists. To delete it:
- Open the app
- Tap the gear on the Today screen to open Settings
- Under Account, tap Delete account
- Confirm deletion
We cannot control how long OpenAI or Apple keep data they process; see their policies above.
Your rights (GDPR)
If you are in the European Economic Area, you can ask us to give you access to your data, correct it, delete it, export it, restrict or object to its use, and you can withdraw consent at any time. Deletion is available in the app. For anything else, email hello@llyli.eu or message us on WhatsApp. You can also complain to your local data protection authority.
We process data to provide the service you ask for, on our legitimate interest in keeping the app working and understanding how it is used, and, for sending your content to AI providers, on your consent.
Children
LLYLI is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has given us data, email hello@llyli.eu or message us on WhatsApp.
Changes
If we change this policy we will update this page and the date above, and tell you in the app if the change affects what data is sent to AI.
Privacy Policy, last updated 15 November 2026.